GitHub now has its own version of tools like GitGuardian that help to scan code and detect vulnerabilities.
Required
What area of the codebase does this involve?
Touches all code.
Will this impact CI/CD procedures?
This adds a GitHub Action/Workflow for code scanning. If issues are found, then they will be moved into the normal development issue queue based on priority.
Acceptance Criteria
[x] Code is scanned periodically for vulnerabilities
GitHub now has its own version of tools like GitGuardian that help to scan code and detect vulnerabilities.
Required
What area of the codebase does this involve?
Touches all code.
Will this impact CI/CD procedures?
This adds a GitHub Action/Workflow for code scanning. If issues are found, then they will be moved into the normal development issue queue based on priority.
Acceptance Criteria